instance (EDIV/RAND pair). The application must now useter_id_t the new master_id field in the ble_gap_evt_sec_info_request_t in
the former field to uniquely identify the LTK for that peer device.stead of div
Exchanged keys are now stored directly in application-provided memory:
The application now supplies pointers to memory to store exchanged keys instead of receiving them in the event.BLE_GAP_EVT_AUTH_STATUS
A number of changes are made to support this:
Two new structures have been added to the API for this purpose, .ble_gap_enc_key_t and ble_gap_id_key_t
T from a bitfield into a set of pointers to keys in application memory. he ble_gap_sec_keys_t has been refactored p_enc_key, p_id_
all pointers that must be initialized by the application to point to its own instances of key structures in memory.key and p_sign_key are
A new introduced and is required as a parameter to structure, ble_gap_sec_keyset_t, has been sd_ble_gap_sec_params_reply
. This allows the application to provide the dual set of pointers to the stack (one for each of the devices participating in the bonding()
procedure). The keys are stored directly in the application's instances as soon as they are received over the air or generated and sent
Please note that a special exception applies to the IRK distributed by the peripheral ( ).ble_gap_sec_keyset_t::keys_periph::p_id_key
If this pointer is initialized to a valid value, the IRK and device address pointed to will be distributed over the air by the SoftDevice top_id_key
the peer device. If, however, the application sets to , the device's currently configured IRK and device address will be distributed.p_id_key NULL
Most applications will want to set this pointer to unless they plan to provide their own IRK and device address instead of using the oneNULL
generated by the SoftDevice or configured using the option and the SV call.BLE_GAP_OPT_PRIVACY sd_ble_gap_address_set()
The authentication (pairing or bonding) procedure result structure has been revamped:
The existing structure, which encapsulates a event, has been modified to fit theble_gap_evt_auth_status_t BLE_GAP_EVT_AUTH_STATUS
new key storage model. A new field has been added that allows the application to check whether the procedure ended up in thebonded
generation of a new bond. A new structure, , which is simply a bitfield of the keys distributed during a bonding procedureble_gap_sec_kdist_t
has been added to the API and two instances of it have been included in the structure as the able_gap_evt_auth_status_t kdist_periph
nd fields. The application can check those new fields to find out which keys ended up being distributed during the bondingkdist_central
procedure after it has completed.
The security information reply now accepts IRKs:
The existing SV call now takes an additional parameter in the form of , a pointer to an optionalsd_ble_gap_sec_info_reply() p_id_info
IRK. This can be set to NULL by the application as it's currently ignored by the SoftDevice.
The GATTS set and get operations for local values have changed:
The new function prototypes require a connection handle (since this is required for certain multi-value attributes) and also use a new structure bl
for parameter input:e_gatts_value_t
sd_ble_gatts_value_set(uint16_t conn_handle, uint16_t handle, ble_gatts_value_t *p_value)
sd_ble_gatts_value_get(uint16_t conn_handle, uint16_t handle, ble_gatts_value_t *p_value)
The GATTS set and get operations for system attributes have changed:
The new function prototypes include an additional parameter, , to allow for partial retrieval or storage of system attributes. If the applicationflags
does not want to make use of this new functionality, it can simply set the parameter to 0.flags
sd_ble_gatts_sys_attr_set(uint16_t conn_handle, uint8_t const *p_sys_attr_data, uint16_t len,
uint32_t flags)
sd_ble_gatts_sys_attr_get(uint16_t conn_handle, uint8_t *p_sys_attr_data, uint16_t *p_len, uint32_t
flags)
The GATTC write parameters have been slightly modified:
The field within the has been moved up in the structure for better alignment.flags ble_gattc_write_params_t
New functionality
